{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2e9ca92b-66d4-50aa-ac59-d990590dc058", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "@next/codemod", "purl": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17", "type": "library", "bom-ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17", "version": "13.5.11-tuxcare.17", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "AIKIDO-2024-10173", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:4ed7eb60-216c-5335-927b-1bb8a8edc820", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2024-10173 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "AIKIDO-2025-10936", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5957f5c7-8ae7-5e9b-b42f-47ad84c88fb9", "analysis": { "state": "resolved", "detail": "Vulnerability AIKIDO-2025-10936 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2024-34351", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:64925c78-ed7d-5a38-a94c-9b158ada6785", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34351 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2024-47831", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5d6e7309-009f-59d4-87f2-fc6cdaeaff4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-47831 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2024-51479", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:83cb19ea-be8e-5315-a0a5-fc4371eaa12b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-51479 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2025-32421", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:7ffc952b-b471-57d9-b86b-c64ee9de8051", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-32421 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2025-48068", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:d860c966-e4d0-5bc8-8fa3-39caa8ee25ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48068 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2025-55173", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:23eed82d-a01c-5217-94c1-149769ff8aaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55173 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2025-55183", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:219a358c-bc5c-5662-8e2a-8240b51ab2f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55183 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2025-55184", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:5f66f06a-5bc8-51f2-a772-e6843ac219ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55184 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2025-57752", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9c718a29-304c-5892-a07e-95ec089d8f5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57752 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2025-57822", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:529f9ae6-f3ce-5305-804e-53d6a3bad69d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-57822 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2025-59471", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:be836a32-7460-5a35-94d1-19b3ab318dd7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59471 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2025-59472", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0c456aad-87bc-54da-a9c2-bc5658d4993c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-59472 does not affect version 13.5.11-tuxcare.17 of @next/codemod. not_affected \u2014 Version 13.5.11-tuxcare.13 is not affected by CVE-2025-59472. The vulnerable PPR (Partial Prerendering) resume endpoint feature does not exist in this version. The resume endpoint handler that processes `Next-Resume: 1` headers, the postponed-state processing logic, and the resume-data-cache decompression code were all introduced in much later Next.js versions (v16.3.0+). Version 13.5.11 predat...", "justification": "code_not_present" } }, { "id": "CVE-2025-67779", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:817d476d-fa82-5230-bb03-e49d5ad44773", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67779 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-27980", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:973a9fc0-b25f-5f82-a23c-efaf6c9c235e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27980 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-29057", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f08029e5-0193-54a9-9288-f8c3b45689a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29057 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-44572", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8e45dcd8-d992-5590-9a80-d7030f67430b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44572 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-44573", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:c2a50a83-326c-5991-a567-35628db8638a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44573 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-44577", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:c6926ac0-b1d2-5a7d-b0c2-4185196f47db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44577 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-44578", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:937e1e53-9991-5324-9c8d-2fc54e93f925", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44578 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-44580", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:09013673-ebd4-5845-8f22-793187fe9176", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44580 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-44581", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:531ce61e-349f-5825-9301-b8e834e5def5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44581 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-44582", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:11931ebc-89f2-58bc-b315-7b020ca2cf75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44582 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-64641", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b24001ca-8e25-51f7-9903-2d4f0982b695", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64641 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-64643", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:61e42d0f-4694-5295-bc84-be0d61807159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64643 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-64645", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:8a3faa99-8c0a-5fcd-a2a4-6371747720d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64645 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-64646", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:0ed58d23-5aa6-5db7-bb6a-fb4540e04a5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64646 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-64647", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:b29ab9d5-23ea-53c9-9f0a-9827e0b81615", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64647 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-64648", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:baa6f759-72bb-590c-9c86-5b00c367e3ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-64648 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "CVE-2026-75604", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:ca415e9b-3324-520c-ae5d-c6f0d39ed5ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-75604 affects version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "GHSA-2xp9-vwfh-vxw4", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:fecc8a9c-0b0d-5c6f-8be3-b5501d389a75", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-2xp9-vwfh-vxw4 affects version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "GHSA-5j59-xgg2-r9c4", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:9e8f8ee3-537c-5144-a197-27668d0bf962", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-5j59-xgg2-r9c4 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "GHSA-8h8q-6873-q5fj", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:991ab0b1-009c-5be0-b726-c75c0d015d4c", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-8h8q-6873-q5fj is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "GHSA-h25m-26qc-wcjf", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:f0f5ac70-0da4-5524-8ecd-3ffd0b05da7e", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-h25m-26qc-wcjf is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "GHSA-mwv6-3258-q52c", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:a5e3c118-12af-5dfb-b599-7a3005499598", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-mwv6-3258-q52c is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } }, { "id": "GHSA-q4gf-8mx6-v5v3", "affects": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ], "bom-ref": "urn:uuid:084a76a9-118b-5816-a860-dcaf95d71ab6", "analysis": { "state": "resolved", "detail": "Vulnerability GHSA-q4gf-8mx6-v5v3 is fixed in version 13.5.11-tuxcare.17 of @next/codemod." } } ], "dependencies": [ { "ref": "pkg:npm/%40next/codemod@13.5.11-tuxcare.17" } ] }